Lanetti agent core: enrolment, desired state, reconcile, signed updates

FeatureOpenView on roadmap· 20 days ago

Imported from GitHub issue El-SaMa/oma#149 by @El-SaMa.

Go agent (shared base with Arx). Outbound HTTPS only.

One-time enrolment token (30 min, tied to order/server), burned on use; per-server long-term credential
Pull signed desired state, reconcile Docker Compose apps, report status/health/logs
Health-check + rollback on failed upgrade
Signed releases, verify before swap, auto-update
Default-deny firewall (22/80/443), shared Caddy for HTTPS
Ubuntu 22.04/24.04 + Debian 12 only; installer refuses others

Comments (0)

No comments yet.

Join the discussion